$ rpki-client -vvf krill.47272.net/repo/HYEHOST/5/AS213707.roa File: AS213707.roa (raw, json) Hash identifier: EhJAYEC69MZ9Rsxm9BGGpLpJW7kT6WqvhUvZS89+Rck= Subject key identifier: 3B:2D:28:9F:48:06:ED:34:A9:52:E1:ED:2B:88:8F:AD:60:22:8D:58 Certificate issuer: /CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Certificate serial: 755319F7CC53270825296F166537346A12DB1157 Authority key identifier: C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject info access: rsync://krill.47272.net/repo/HYEHOST/5/AS213707.roa Signing time: Thu 03 Jul 2025 15:53:08 +0000 ROA not before: Thu 03 Jul 2025 15:48:08 +0000 ROA not after: Thu 02 Jul 2026 15:53:08 +0000 asID: 213707 IP address blocks: 2a0a:6044:6c00::/40 maxlen: 40 Validation: OK Signature path: rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Jul 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:53:19:f7:cc:53:27:08:25:29:6f:16:65:37:34:6a:12:db:11:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3CF41898936CB9C573DB1EAAB94C6E669951FD7 Validity Not Before: Jul 3 15:48:08 2025 GMT Not After : Jul 2 15:53:08 2026 GMT Subject: CN=3B2D289F4806ED34A952E1ED2B888FAD60228D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4f:34:9f:96:28:f8:36:37:8c:79:a8:02:06: ec:65:bf:68:91:16:9d:c1:9f:46:d8:58:6b:e8:34: 1a:c2:45:2e:03:78:3f:b0:13:45:c4:3a:14:00:b5: 2e:38:8b:eb:03:10:90:12:82:37:ba:17:0e:ec:6f: 51:7c:39:6b:6c:0a:1c:34:40:56:40:ee:0b:1b:c1: a5:09:50:7b:3c:29:11:55:ad:8f:58:1a:7f:ea:96: 99:c8:16:d2:bc:ba:9c:2a:04:a9:75:2b:5f:86:6c: bc:45:59:c9:20:00:1f:1a:f2:0d:0f:c7:2b:19:9d: dd:84:03:e8:ec:24:08:ef:90:ef:4e:f8:d1:a4:8e: ec:14:0a:d6:bb:b9:64:6f:34:cb:b9:f1:8f:28:56: 37:9c:b0:2a:ef:60:6c:98:92:9c:9a:63:9e:96:32: 97:b1:62:f6:91:43:10:17:d3:07:9e:5a:3c:9b:50: e5:9c:5e:c5:3f:18:61:84:dd:02:32:63:6e:00:cc: 45:f6:1c:7a:76:f3:68:04:0e:18:9b:b7:62:3f:c6: d7:78:19:36:8d:22:7d:f9:b7:c3:bc:f0:61:ff:29: 97:99:47:fe:5d:4e:d4:40:62:bb:de:51:00:48:eb: 45:f5:f5:41:91:e1:ac:a9:c3:35:be:6a:a1:46:8d: 89:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2D:28:9F:48:06:ED:34:A9:52:E1:ED:2B:88:8F:AD:60:22:8D:58 X509v3 Authority Key Identifier: keyid:C3:CF:41:89:89:36:CB:9C:57:3D:B1:EA:AB:94:C6:E6:69:95:1F:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer Subject Information Access: Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/5/AS213707.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:6044:6c00::/40 Signature Algorithm: sha256WithRSAEncryption 37:9d:e4:93:b9:d5:c9:9c:dd:6e:89:b9:bd:1e:1c:36:6a:e7: dd:6b:7d:2c:06:a3:46:b1:64:96:cd:28:64:bd:88:b4:58:cb: 6a:05:77:ce:fe:af:f1:df:e2:11:a6:d8:bb:e2:47:fc:2b:57: 97:7d:b4:32:66:0a:60:c9:50:dc:a5:ca:0b:d4:1b:ba:42:fe: 0b:a4:f3:19:70:c2:b5:c1:6a:b2:90:bb:73:c5:72:16:f8:28: 94:12:eb:cd:90:6f:38:23:96:c4:d4:45:4c:70:3c:92:1b:c8: f0:1c:08:9c:d8:25:9c:94:91:7b:db:61:06:5a:00:60:14:3a: 30:60:ec:55:96:21:2c:a5:13:3c:aa:67:10:69:ba:0c:48:9a: e3:7b:75:05:1c:54:d0:1e:22:96:38:91:1f:ae:a5:bc:90:f0: 61:d1:4c:84:d3:33:7a:87:23:c8:df:31:c2:27:86:57:ea:45: 28:b3:bd:8c:db:26:78:fa:3f:5b:fd:7d:7e:bf:0d:11:be:e9: e7:04:65:16:61:06:2c:e9:68:b8:a5:d5:fa:e2:6c:97:bc:5b: 33:53:ae:92:d7:d6:fd:9d:24:75:6e:77:f6:21:a8:24:28:f5: 50:a8:d2:72:92:31:5c:26:71:e5:e4:2a:47:ef:a0:1a:24:11: 55:73:1f:c5 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgIUdVMZ98xTJwglKW8WZTc0ahLbEVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzNDRjQxODk4OTM2Q0I5QzU3M0RCMUVBQUI5NEM2RTY2 OTk1MUZENzAeFw0yNTA3MDMxNTQ4MDhaFw0yNjA3MDIxNTUzMDhaMDMxMTAvBgNV BAMTKDNCMkQyODlGNDgwNkVEMzRBOTUyRTFFRDJCODg4RkFENjAyMjhENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTzSflij4NjeMeagCBuxlv2iR Fp3Bn0bYWGvoNBrCRS4DeD+wE0XEOhQAtS44i+sDEJASgje6Fw7sb1F8OWtsChw0 QFZA7gsbwaUJUHs8KRFVrY9YGn/qlpnIFtK8upwqBKl1K1+GbLxFWckgAB8a8g0P xysZnd2EA+jsJAjvkO9O+NGkjuwUCta7uWRvNMu58Y8oVjecsCrvYGyYkpyaY56W MpexYvaRQxAX0weeWjybUOWcXsU/GGGE3QIyY24AzEX2HHp282gEDhibt2I/xtd4 GTaNIn35t8O88GH/KZeZR/5dTtRAYrveUQBI60X19UGR4aypwzW+aqFGjYnTAgMB AAGjggHeMIIB2jAdBgNVHQ4EFgQUOy0on0gG7TSpUuHtK4iPrWAijVgwHwYDVR0j BBgwFoAUw89BiYk2y5xXPbHqq5TG5mmVH9cwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T VC81L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFGRDcuY3Js MIGTBggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1y cHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5 MWJlM2Y5ZC83L0MzQ0Y0MTg5ODkzNkNCOUM1NzNEQjFFQUFCOTRDNkU2Njk5NTFG RDcuY2VyME8GCCsGAQUFBwELBEMwQTA/BggrBgEFBQcwC4YzcnN5bmM6Ly9rcmls bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzUvQVMyMTM3MDcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq CmBEbDANBgkqhkiG9w0BAQsFAAOCAQEAN53kk7nVyZzdbom5vR4cNmrn3Wt9LAaj RrFkls0oZL2ItFjLagV3zv6v8d/iEabYu+JH/CtXl320MmYKYMlQ3KXKC9QbukL+ C6TzGXDCtcFqspC7c8VyFvgolBLrzZBvOCOWxNRFTHA8khvI8BwInNglnJSRe9th BloAYBQ6MGDsVZYhLKUTPKpnEGm6DEia43t1BRxU0B4iljiRH66lvJDwYdFMhNMz eocjyN8xwieGV+pFKLO9jNsmePo/W/19fr8NEb7p5wRlFmEGLOlouKXV+uJsl7xb M1OuktfW/Z0kdW539iGoJCj1UKjScpIxXCZx5eQqR++gGiQRVXMfxQ== -----END CERTIFICATE-----Generated at Sat Jul 5 02:19:02 2025 by rpki-client